Gaim instant messenger buffer overflow

Buffer overflow on away message displaying...

Trillian instant messenger cleartext passwords leak

Yahoo Mail passwords are stored in common place with in cleartext...

CVE-2005-2304

The CVE-2005-2304 entry concerns Microsoft MSN Messenger 9.0 and Internet Explorer 6.0, where processing an image with an ICC Profile that has a large Tag Count can cause a denial of service (crash). The vulnerability is rooted in image handling in these products, enabling a remote attacker to tr...

CVE-2005-2304

Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service crash via an image with an ICC Profile with a large Tag Count...

CVE-2005-2304

Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service crash via an image with an ICC Profile with a large Tag Count...

CVE-2005-2225

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...

EUVD-2005-2226

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...

CVE-2005-2225

Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so...

CVE-2005-2225

The CVE-2005-2225 entries describe a DoS condition in Microsoft MSN Messenger where remote attackers can cause users to be kicked from group conversations by sending a plaintext message containing the string ".pif". Gaim is also reported affected, suggesting the issue could be in the protocol or ...

PT-2005-3154 · Gaim +1 · Gaim +1

Name of the Vulnerable Software and Affected Versions: Microsoft MSN Messenger affected versions not specified Gaim affected versions not specified Description: The issue allows remote attackers to cause a denial of service by sending a plaintext message containing the ".pif" string. This string ...

[Full-disclosure] NateOn Messenger Version 3.0 Directory listing vulnerability

Dear F/D Mailing lists Title: NateOn Messenger Version 3.0 Directory listing vulnerability Discoverer: PARK, GYU TAE [email protected] Advisory No.: NRVA05-02 Critical: Less critical Impact: Information disclosed by unauthorized user and DoS Where: From remote Operating System: Windows Only...

CVE-2005-2137

Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors...

CVE-2005-2137

Unknown vulnerability in NateOn Messenger 3.0 allows remote attackers to list arbitrary directories via unknown attack vectors...

CVE-2005-2137

Public technical details for CVE-2005-2137 are not provided in the supplied documents. They only state an unknown vulnerability in NateOn Messenger 3.0 allowing directory listing; no affected versions, root cause, or fixes are disclosed. Monitor for updates.

KDE popper Windows messenged compatible message sender symbolic links problem

Symbolic links problem on temoprary file creation...

[SA15819] NateOn Messenger Directory Listing Disclosure Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2002-1953

Heap-based buffer overflow in the goim handler of AOL Instant Messenger AIM 4.4 through 4.8.2616 allows remote attackers to cause a denial of service crash via escaping of the screen name parameter, which triggers the overflow when the user selects "Get Info" on the buddy...

CVE-2002-1831

MSN Messenger Service 1.0–4.6 is affected by a remote DoS vulnerability: an invite request containing hex-encoded spaces (%20) in the Invitation-Cookie field can crash the service. The available documents do not provide a root-cause analysis, affected versions beyond 1.0–4.6, exploit specifics, o...

CVE-2002-1953

The CVE-2002-1953 issue affects AOL Instant Messenger (AIM) versions 4.4–4.8.2616, specifically the goim handler. It is a heap-based buffer overflow triggered by escaping the screen name parameter when a user selects Get Info on a buddy, leading to a denial of service (crash). Public exploit deta...

CVE-2002-1813

Vulnerability (CVE-2002-1813) : AOL Instant Messenger (AIM) 4.8.2790 is affected by a directory traversal flaw that allows remote attackers to cause arbitrary program execution by placing the target program in the href attribute of a link. The root cause is insufficient validation of the href in ...